{"id":"CVE-2026-112480","kind":"vulnerability","aliases":["CVE-2026-112480"],"related":[],"title":"macOS: permissions flaw lets a screen-sharing user view another user's screen","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A user with screen sharing access may be able to view another user's screen.","summary":"A permissions issue in macOS let a user with screen sharing access view another user's screen. Apple fixed it with additional restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fleet-management","infrastructure","macos","self-hosted"],"not_affected_if":["screen-sharing-off"],"how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed versions.\n- unknown for any setting that exposes the flaw beyond screen sharing being enabled.","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) or later.","status":"open","published_at":"2026-10-26T21:17:38+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","triaged_at":"2026-10-26T21:30:02+00:00","updated_at":"2026-10-26T21:30:02+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:30:02Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) or later.","reach":"network","title":"macOS: permissions flaw lets a screen-sharing user view another user's screen","impact":"low","summary":"A permissions issue in macOS let a user with screen sharing access view another user's screen. Apple fixed it with additional restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2 and Tahoe 26.7.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","self-hosted","fleet-management"],"confidence":0.5,"needs_auth":"yes","worst_case":"A user with screen sharing access views another user's screen.","analyst_note":"Confirm the exact trigger and whether the flaw needs remote management enabled; the NVD entry gives no CVSS score and no Apple security note was linked.","how_to_check":"- Run `sw_vers -productVersion` on each Mac and compare against the fixed versions.\n- unknown for any setting that exposes the flaw beyond screen sharing being enabled.","needs_analyst":true,"not_affected_if":["screen-sharing-off"],"who_is_affected":"Macs where screen sharing or remote management is enabled and more than one user can connect. Macs without screen sharing enabled are not exposed through this path. Single-user machines with screen sharing off can skip it.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000597,"input_tokens":3279,"output_tokens":539,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112480':17A,20A '-2026':16A,19A '15.8.2':58B,81C '26.7.2':61B,84C '27.2':56B,78C 'abl':93C 'access':40B,90C 'addit':50B,68C 'address':66C 'anoth':11A,42B,96C 'appl':46B 'cve':15A,18A 'fix':47B,73C 'flaw':3A 'fleet':22B 'fleet-manag':21B 'gate':55B,77C 'golden':54B,76C 'host':28B 'infrastructur':24B 'issu':31B,64C,71C 'let':4A,34B 'maco':1A,25B,33B,53B,75C,79C,82C 'manag':23B 'may':91C 'permiss':2A,30B,63C 'restrict':51B,69C 'screen':7A,14A,38B,45B,88C,99C 'screen-shar':6A 'self':27B 'self-host':26B 'sequoia':57B,80C 'share':8A,39B,89C 'taho':60B,83C 'user':9A,12A,36B,43B,86C,97C 'view':10A,41B,95C","nicknames":[],"mitigations":[],"who_affected":"Macs where screen sharing or remote management is enabled and more than one user can connect. Macs without screen sharing enabled are not exposed through this path. Single-user machines with screen sharing off can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:38+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112480","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112480","severity":null,"published_at":"2026-10-26T21:17:38+00:00","modified_at":"2026-10-26T21:17:38+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","fetched_at":"2026-10-26T21:20:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}